JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.223.130.194

145.223.130.194 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 66%: ?

66%

ISP	BYTEPLUS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150436
Domain Name	bytedance.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.223.130.194

Whois 145.223.130.194

IP Abuse Reports for 145.223.130.194:

This IP address has been reported a total of 48 times from 25 distinct sources. 145.223.130.194 was first reported on April 16th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2026-06-12 02:27:14 (1 week ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-11 23:31:15 (1 week ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇨🇦 JuicyJ	2026-06-02 11:29:38 (2 weeks ago)	Trying to look for places to exploit	Web Spam
🇺🇸 ipblock.com	2026-05-28 22:12:00 (3 weeks ago)	IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
Anonymous	2026-05-27 09:22:15 (3 weeks ago)	FortiWeb WAF: 4 attacks detected. Threat Score: 14800. Types: Client Management(2), GEO IP(2). Origi ... show more FortiWeb WAF: 4 attacks detected. Threat Score: 14800. Types: Client Management(2), GEO IP(2). Origin: Singapore. show less	Web App Attack
Anonymous	2026-05-25 09:18:48 (3 weeks ago)	FortiWeb WAF: 106 attacks detected. Threat Score: 23600. Types: Client Management(53), GEO IP(53). O ... show more FortiWeb WAF: 106 attacks detected. Threat Score: 23600. Types: Client Management(53), GEO IP(53). Origin: Singapore. show less	Web App Attack
Anonymous	2026-05-25 04:39:12 (3 weeks ago)	Attack Signature Blocked: /wishlist/index/add/product/13627/form_key/FeugQKTVgvhUbZ9K/ (Magento Site ... show more Attack Signature Blocked: /wishlist/index/add/product/13627/form_key/FeugQKTVgvhUbZ9K/ (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
Anonymous	2026-05-25 01:24:52 (3 weeks ago)	Portscan: TCP/443 (4x), TCP/80 (2x)	Port Scan
🇺🇸 TPI-Abuse	2026-05-25 00:18:49 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 145.223.130.194 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 145.223.130.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 20:18:39.650304 2026] [security2:error] [pid 24550:tid 24550] [client 145.223.130.194:51194] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|drrw.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "drrw.net"] [uri "/downloads/XML/go-file.sql"] [unique_id "ahOVX06Ma29y1rXAZ2UNlgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-24 23:11:38 (3 weeks ago)	2026-05-25 01:11:37 ERROR util.AccessViolations - 145.223.130.194 report to fail2ban - action: block ... show more 2026-05-25 01:11:37 ERROR util.AccessViolations - 145.223.130.194 report to fail2ban - action: block ... show less	Hacking Brute-Force Bad Web Bot
🇫🇮 as211431.net	2026-05-24 18:05:22 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /cal-edd-vdrsg/groupon-hilton-head.html UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 BSG Webmaster	2026-05-24 11:56:15 (3 weeks ago)	Hacking Attempt using path /podcasts/oursaviourmv.org/podcasts/p.php?file=2016-03-13_sermon.mp3&amp% ... show more Hacking Attempt using path /podcasts/oursaviourmv.org/podcasts/p.php?file=2016-03-13_sermon.mp3&amp%3Blayout=button_count&amp%3Bshow_faces=false&amp%3Bwidth=90&amp%3Baction=like&amp%3Bcolorscheme=light&amp%3Bheight=20%22 show less	Hacking
🇺🇸 Al Coholic	2026-05-24 10:30:51 (3 weeks ago)	Detected By Fail2ban	Hacking Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-05-24 08:52:03 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 145.223.130.194 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 145.223.130.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 04:51:53.157335 2026] [security2:error] [pid 16087:tid 16087] [client 145.223.130.194:33200] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.glolady.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.glolady.com"] [uri "/"mailto:[email protected]"] [unique_id "ahK8KQ-Qz6J_6QPo-yI2UgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 sssrit	2026-05-23 23:39:08 (3 weeks ago)	145.223.130.194 - - [24/May/2026:01:39:07 +0200] "GET /wp-login.php?action=logout HTTP/1.1" 403 1428 ... show more 145.223.130.194 - - [24/May/2026:01:39:07 +0200] "GET /wp-login.php?action=logout HTTP/1.1" 403 1428 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/184.1" ... show less	Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 211.20.14.156

🇧🇷 200.195.10.205

🇳🇱 195.178.110.42

🇸🇬 194.5.82.135

🇫🇮 147.185.133.225

🇺🇸 50.2.184.242

🇺🇸 5.183.252.120

🇰🇷 222.239.251.12

🇨🇴 181.119.84.131

🇫🇷 91.231.89.225

🇸🇬 47.84.226.99

🇨🇳 14.103.115.80

🇺🇸 193.202.11.112

🇨🇴 181.119.84.125

🇳🇱 176.65.139.235

🇩🇪 148.153.140.123

🇮🇹 91.80.74.242

🇵🇪 38.250.157.16

🇺🇸 2607:f8b0:4004:1002::122

🇷🇺 212.124.19.205